Rust advisories / crate
Security history · rustls · data from Oct 24, 2026
Is rustls safe to use? Its security history
VerdictNo open advisories. 7 past vulnerabilities were fixed; use 0.23.46 or newer to be clear of all of them.
7advisories on record
7vulnerabilities
0unmaintained notices
0.23.46newest fixed version
Every advisory, newest first
- Vulnerability MediumRUSTSEC-2026-0346 · 2026-10-14`Debug` impls for client session values expose TLS secrets
- Vulnerability LowRUSTSEC-2026-0347 · 2026-10-14Buffered application data sent to outer server after ECH rejection
- Vulnerability LowRUSTSEC-2026-0348 · 2026-10-14Brotli certificate decompression can allocate up to 1 GiB before authentication
- Vulnerability LowRUSTSEC-2026-0349 · 2026-10-14Unauthenticated ServerHello can downgrade later connections to classical key exchange
- Vulnerability MediumRUSTSEC-2026-0285 · 2026-09-14TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
- VulnerabilityRUSTSEC-2024-0399 · 2024-11-22rustls network-reachable panic in `Acceptor::accept`
- Vulnerability HighRUSTSEC-2024-0336 · 2024-04-19`rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input
Check your version
Run cargo tree -i rustls to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: rustls crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on itrustls crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?